Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/cS8NLO1CFBmMlnzs_ovFwPeWdi0.roa
File: cS8NLO1CFBmMlnzs_ovFwPeWdi0.roa (raw, json)
Hash identifier: bOANL/P0eftlgNI5UA5/U5O1BPciQzbhNUn65NJ/Kl8=
Subject key identifier: 71:2F:0D:2C:ED:42:14:19:8C:96:7C:EC:FE:8B:C5:C0:F7:96:76:2D
Certificate issuer: /CN=07f0ba59b1c76cf20dc4382e5a2854d7142c26ba
Certificate serial: 019263AD83831D88F69A436A096ED59E2A16
Authority key identifier: 07:F0:BA:59:B1:C7:6C:F2:0D:C4:38:2E:5A:28:54:D7:14:2C:26:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/cS8NLO1CFBmMlnzs_ovFwPeWdi0.roa
Signing time: Sun 06 Oct 2024 21:12:48 +0000
ROA not before: Sun 06 Oct 2024 21:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216176
IP address blocks: 2a14::/32 maxlen: 32
2a14:7::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:63:ad:83:83:1d:88:f6:9a:43:6a:09:6e:d5:9e:2a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f0ba59b1c76cf20dc4382e5a2854d7142c26ba
Validity
Not Before: Oct 6 21:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=712f0d2ced4214198c967cecfe8bc5c0f796762d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:79:bc:0e:ed:13:42:8d:b1:ee:6c:6b:20:97:
16:79:e6:63:09:3b:60:bf:8b:84:af:1a:10:84:8c:
64:c8:fe:49:8f:01:d3:ce:86:5a:75:31:a9:39:7d:
36:ef:33:02:ec:d3:8a:65:a2:1c:71:38:42:5d:25:
a8:36:82:8c:35:11:02:6c:c5:d7:d5:19:25:a8:5e:
cb:49:11:dc:46:b0:2f:42:38:10:2e:c5:c9:56:20:
dd:c5:74:09:79:2f:b6:2f:c4:70:6c:e5:ec:a0:cd:
c3:10:e0:04:14:f4:69:c5:0e:58:c3:97:8c:07:96:
a3:6d:3d:07:aa:42:0d:f0:9b:e5:d6:36:c1:39:cc:
d1:39:9a:33:ff:4d:68:6a:fa:18:23:2a:9f:d6:87:
ef:8a:c6:b9:86:38:b9:43:50:f0:28:73:37:39:e1:
dd:19:78:1f:44:6a:c7:c1:6b:0f:14:1e:9d:c5:10:
8c:2e:6d:37:60:26:1f:dc:12:82:9d:47:c4:62:32:
ba:df:c6:05:2b:36:f7:3a:ab:cd:e0:b4:ab:a2:c8:
7e:6a:c5:11:c1:95:c6:3d:8c:9a:32:85:54:70:56:
d4:be:3e:3e:df:2e:1c:ae:0b:95:e6:bc:c8:e6:46:
8e:45:d8:2c:51:28:6b:47:8a:86:81:aa:de:cb:32:
0d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2F:0D:2C:ED:42:14:19:8C:96:7C:EC:FE:8B:C5:C0:F7:96:76:2D
X509v3 Authority Key Identifier:
keyid:07:F0:BA:59:B1:C7:6C:F2:0D:C4:38:2E:5A:28:54:D7:14:2C:26:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/cS8NLO1CFBmMlnzs_ovFwPeWdi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14::/32
2a14:7::/32
Signature Algorithm: sha256WithRSAEncryption
10:8a:67:5a:77:9b:7d:53:20:c2:31:cd:0e:69:ee:a3:8b:2c:
54:9d:c6:dc:73:d1:d9:62:05:fc:b1:0a:97:dd:7e:c7:50:31:
a1:ab:6a:5b:e3:6f:a4:45:3c:9c:b7:96:f0:e4:67:0c:71:b2:
ca:39:90:b3:f8:34:06:84:58:10:df:93:27:9c:9c:c1:66:51:
85:7c:18:67:89:31:c5:be:2b:39:6b:ec:4e:94:f1:0c:42:7c:
3e:00:ab:e8:80:1a:7f:17:a5:25:e9:d1:af:0f:2e:0e:1f:63:
85:8e:01:f8:9d:8e:16:8e:46:5c:5c:a8:d4:75:54:39:d4:20:
85:9c:76:7b:70:0f:45:c8:5e:19:d4:b6:1d:16:30:d3:e1:ad:
46:8a:27:ca:a1:b9:c5:eb:fb:54:84:0d:a7:8b:4f:7d:91:b3:
c9:45:9c:18:5f:fe:57:60:c1:ea:34:91:6c:e7:78:b5:f5:98:
de:44:fa:9a:c4:08:60:65:6f:0a:a4:20:28:15:57:b3:a7:be:
38:94:21:94:5c:3a:76:6f:b2:62:e2:39:64:f0:57:2e:77:6b:
58:4b:b2:1b:83:23:92:2a:78:a9:ee:8c:b6:70:67:8b:d5:fc:
f0:14:87:0a:4d:83:e9:51:40:4a:91:fa:74:1a:0d:05:38:7c:
72:f9:a0:0e
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZJjrYODHYj2mkNqCW7VnioWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZjBiYTU5YjFjNzZjZjIwZGM0MzgyZTVhMjg1NGQ3MTQy
YzI2YmEwHhcNMjQxMDA2MjExMjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTJmMGQyY2VkNDIxNDE5OGM5NjdjZWNmZThiYzVjMGY3OTY3NjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHm8Du0TQo2x7mxrIJcWeeZjCTtg
v4uErxoQhIxkyP5JjwHTzoZadTGpOX027zMC7NOKZaIccThCXSWoNoKMNRECbMXX
1RklqF7LSRHcRrAvQjgQLsXJViDdxXQJeS+2L8RwbOXsoM3DEOAEFPRpxQ5Yw5eM
B5ajbT0HqkIN8Jvl1jbBOczROZoz/01oavoYIyqf1ofvisa5hji5Q1DwKHM3OeHd
GXgfRGrHwWsPFB6dxRCMLm03YCYf3BKCnUfEYjK638YFKzb3OqvN4LSrosh+asUR
wZXGPYyaMoVUcFbUvj4+3y4crguV5rzI5kaORdgsUShrR4qGgareyzINEwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFHEvDSztQhQZjJZ87P6LxcD3lnYtMB8GA1UdIwQY
MBaAFAfwulmxx2zyDcQ4LlooVNcULCa6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQl9DNldiSEhiUElOeERndVdpaFUxeFFzSnJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yOTZhNzgtMDFlMi00OTZkLWJhNTkt
MjIwMGIzY2M1N2U2LzEvY1M4TkxPMUNGQm1NbG56c19vdkZ3UGVXZGkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8yOTZhNzgtMDFlMi00OTZkLWJhNTktMjIwMGIzY2M1N2U2
LzEvQl9DNldiSEhiUElOeERndVdpaFUxeFFzSnJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKhQAAAMF
ACoUAAcwDQYJKoZIhvcNAQELBQADggEBABCKZ1p3m31TIMIxzQ5p7qOLLFSdxtxz
0dliBfyxCpfdfsdQMaGralvjb6RFPJy3lvDkZwxxsso5kLP4NAaEWBDfkyecnMFm
UYV8GGeJMcW+Kzlr7E6U8QxCfD4Aq+iAGn8XpSXp0a8PLg4fY4WOAfidjhaORlxc
qNR1VDnUIIWcdntwD0XIXhnUth0WMNPhrUaKJ8qhucXr+1SEDaeLT32Rs8lFnBhf
/ldgweo0kWzneLX1mN5E+prECGBlbwqkICgVV7OnvjiUIZRcOnZvsmLiOWTwVy53
a1hLshuDI5IqeKnujLZwZ4vV/PAUhwpNg+lRQEqR+nQaDQU4fHL5oA4=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:47:07 2025 by rpki-client